Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/KidEeX7GGd0QQT73W_rqs4WXraA.roa
File: KidEeX7GGd0QQT73W_rqs4WXraA.roa (raw, json)
Hash identifier: abs3ilsIDutmDcqiR1drjm3y7to3pq61kHI/j72t0ho=
Subject key identifier: 2A:27:44:79:7E:C6:19:DD:10:41:3E:F7:5B:FA:EA:B3:85:97:AD:A0
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 02CBA375
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/KidEeX7GGd0QQT73W_rqs4WXraA.roa
Signing time: Thu 10 Mar 2022 16:41:06 +0000
ROA not before: Thu 10 Mar 2022 16:41:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 185.160.195.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46900085 (0x2cba375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Mar 10 16:41:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a2744797ec619dd10413ef75bfaeab38597ada0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:4f:8f:89:ac:80:37:50:00:c1:dd:32:3a:
45:74:18:d1:9c:aa:07:39:14:61:e3:ea:fb:43:9d:
a1:75:64:90:2b:3d:da:31:f8:5a:2d:9c:c3:12:9a:
aa:d4:e4:cd:93:28:5b:1f:95:1c:27:05:39:6f:93:
a7:17:92:4e:3e:bc:77:e9:b0:ed:63:5f:78:9b:a0:
37:fe:e2:8d:b4:1a:b7:04:37:54:88:0d:f4:60:98:
15:74:4e:4d:7b:fe:3d:e5:34:c7:72:6a:bc:70:cd:
88:f1:c2:eb:94:bf:d1:25:44:37:9e:75:7e:f9:48:
c0:58:bd:82:83:0c:f2:67:a6:e5:30:af:d0:75:dc:
17:ac:ed:c5:f2:4b:bd:11:48:b4:4a:06:2a:31:2b:
12:e3:50:c0:73:c6:aa:6b:b3:cd:c8:ae:70:04:86:
5a:12:33:91:c7:65:52:86:67:a1:60:27:d7:95:33:
4f:65:63:66:b5:a8:18:3a:3e:f7:40:a6:ab:d0:56:
de:aa:d6:18:21:60:76:45:a1:6d:54:cb:8b:d6:5e:
5c:6b:73:f2:fd:1e:76:21:2f:90:98:49:f5:d8:d0:
e7:fa:73:b3:81:8d:db:08:96:7b:a2:ac:b9:53:3c:
6e:5d:7a:7d:5c:83:09:4f:0f:95:b4:92:7e:d3:b3:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:27:44:79:7E:C6:19:DD:10:41:3E:F7:5B:FA:EA:B3:85:97:AD:A0
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/KidEeX7GGd0QQT73W_rqs4WXraA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.195.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c7:8b:6a:a8:cd:a2:ca:ae:8c:90:1c:21:b2:04:17:bd:a0:
c4:3f:91:74:b4:bd:33:3f:28:58:64:58:fa:2c:6e:ad:29:17:
12:8b:05:b3:41:a5:06:35:8f:0c:6b:8c:81:19:c9:80:15:41:
dd:f7:d4:6f:b1:dc:79:ab:73:ce:53:ba:ae:bc:23:a6:5a:e5:
38:d5:35:39:4e:2a:8e:27:bd:36:d0:14:cc:d6:46:0d:3c:aa:
e6:b7:e3:b9:35:c5:14:dc:c4:5d:9f:93:83:21:02:51:e2:32:
1f:01:5e:c6:59:bc:9c:4d:9a:e4:5a:b4:29:f4:96:dd:73:17:
9d:62:b8:c2:69:ed:af:d2:9d:37:cd:f0:69:70:ff:e9:58:16:
0a:27:a5:a5:64:c8:a9:87:38:9e:51:3e:c7:5e:53:57:b8:fc:
89:ec:6c:6e:12:e9:cc:a5:95:09:f1:c5:8c:65:5a:8b:92:50:
9a:2c:32:b9:15:7e:dc:07:01:fd:3c:cd:60:7a:34:2a:21:f5:
ba:aa:59:3c:d7:78:4a:8f:77:8c:da:4d:71:4f:36:f1:64:09:
67:40:40:e9:0d:cc:ad:6c:ee:5e:6f:16:7c:1e:d9:7a:46:c1:
3c:fb:f9:9c:2b:7a:69:15:9c:2a:98:71:7f:bd:c0:22:ba:cb:
82:56:bd:85
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAsujdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MWRkMGViZmY1YmEzOGE4NzU4Yjc5NGQwNGQ2MjkwNTE5NGEzMjY2MB4XDTIyMDMx
MDE2NDEwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmEyNzQ0Nzk3ZWM2
MTlkZDEwNDEzZWY3NWJmYWVhYjM4NTk3YWRhMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMBdT4+JrIA3UADB3TI6RXQY0ZyqBzkUYePq+0OdoXVkkCs9
2jH4Wi2cwxKaqtTkzZMoWx+VHCcFOW+TpxeSTj68d+mw7WNfeJugN/7ijbQatwQ3
VIgN9GCYFXROTXv+PeU0x3JqvHDNiPHC65S/0SVEN551fvlIwFi9goMM8mem5TCv
0HXcF6ztxfJLvRFItEoGKjErEuNQwHPGqmuzzciucASGWhIzkcdlUoZnoWAn15Uz
T2VjZrWoGDo+90Cmq9BW3qrWGCFgdkWhbVTLi9ZeXGtz8v0ediEvkJhJ9djQ5/pz
s4GN2wiWe6KsuVM8bl16fVyDCU8PlbSSftOzyp8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQqJ0R5fsYZ3RBBPvdb+uqzhZetoDAfBgNVHSMEGDAWgBQR3Q6/9bo4qHWL
eU0E1ikFGUoyZjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VkME92X1c2T0toMWkzbE5CTllwQlJsS01tWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvYTY2YTI5LTUxY2MtNGJhOS04ODRmLWYxNzYxM2VhNDllNy8x
L0tpZEVlWDdHR2QwUVFUNzNXX3JxczRXWHJhQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
YTY2YTI5LTUxY2MtNGJhOS04ODRmLWYxNzYxM2VhNDllNy8xL0VkME92X1c2T0to
MWkzbE5CTllwQlJsS01tWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmgwzANBgkqhkiG9w0BAQsFAAOC
AQEAUMeLaqjNosqujJAcIbIEF72gxD+RdLS9Mz8oWGRY+ixurSkXEosFs0GlBjWP
DGuMgRnJgBVB3ffUb7HceatzzlO6rrwjplrlONU1OU4qjie9NtAUzNZGDTyq5rfj
uTXFFNzEXZ+TgyECUeIyHwFexlm8nE2a5Fq0KfSW3XMXnWK4wmntr9KdN83waXD/
6VgWCielpWTIqYc4nlE+x15TV7j8iexsbhLpzKWVCfHFjGVai5JQmiwyuRV+3AcB
/TzNYHo0KiH1uqpZPNd4So93jNpNcU828WQJZ0BA6Q3MrWzuXm8WfB7ZekbBPPv5
nCt6aRWcKphxf73AIrrLgla9hQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:45:56 2025 by rpki-client